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1.-25. (canceled) 

26. (currently amended) A method of providing security in a network having 
a network interface device that makes a network connection without a 
firewall capability in said communication network interface device that is 
required by the network for data transfer between the network and a host 
device using the network interface device, said method comprising: 

a) allowing , by said network, a connection to said network to be 
established when said host device uses said network interface device without 
the required firewall capability only if a firewall device comprising a 
hardware implemented firewall is coupled to said host device and a 

confi guration integrity check of a software component on said host device 
passes ; 

b) receiving data from said network over said connection established 
via said communication network interface device; 

c) processing said data with said hardware implemented firewall; and 

d) transferring said processed data to said host d e vic e ; and host 
device. 

e ) p e rforming a c onfiguration int e grity ch e ck of a software compon e nt 
on a host d e vice, wh e rein said-configuration integrity ch o ck is performed - 
b e for e said network eonnec - tien is allow e d, wherein- said connection is - 
allow e d only if said configu r ation integri ty choc k pass e s. 
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27. (currently amended) The method of claim 26, wherein o) wherein a) 
further comprises performing said configuration integrity check by 
performing a hash on said software component to produce a hash value and 
comparing said hash value with a stored hash value. 

28. (original) The method of claim 27, wherein said stored hash value 
resides on said firewall device. 

29. -30. (cancelled) 

3 1 . (currently amended) The method of claim 26, further comprising: 

f) swapping e) swapping resource spaces in said host device that are 
reserved for said communication network interface device and said firewall 
device, wherein said host device treats said communication network 
interface device as said firewall device and vice versa; and 

gf sa id com m unicati o n f) said network interface device transferring 
data received from said network in b) to said firewall device, wherein said 
firewall device processes said data with said hardware implemented firewall. 

32. (currently amended) The method of claim 26,further comprising: 

f) transferring e) transferring data to be transferred over said network 
by said commu ni cation network interface device to said firewall device; and 

g) proc e ssing f) processing said data with said hardware implemented 
firewall, wherein said data is processed by said hardware implemented 
firewall before it is transferred over said network connection established via 
said communication network interface device. 
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33. (currently amended) The method of claim 32, wherein said f) comprises 
e) comprises said host device routing said data to said firewall device before 
it is sent to said communication network interface device, said routing taking 
place at a physical layer in said data stack. 

34. (currently amended) The method of claim 26, further comprising: 

f) p e rformi n g a configuration in te grity chock of a software co mpon e nt 
on ■ said host d e vi ce ; and 

wherein a) further comprises sending policies to said firewall 
device, wherein the operation of said hardware implemented firewall is 
modified. 

35. -39. (cancelled) 

40. (currently amended) A method of providing security in a network having 
a network interface device that makes a network connection without a 
firewall capability in said communication network interface device that is 
required by the network for data transfer between the network and a host 
device using the network interface device, said method comprising: 

allowing , by a network, a connection to said network to be established 
when said host device uses said network interface device without the 
required firewall capability only if a firewall device comprising a hardware 
implemented firewall is coupled to said host device and a configuration 
integrity check of a software component on said host device passes : 

receiving data from said network over said connection established via 
said communication network interface device; 

processing said data with said hardware implemented firewall; and 
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transferring said processed data to said host device; ®b4 
performieg-a wherein the configuration integrity check of a software 
the software component on said host device few- comprises performing a hash 
on said software component to produce a hash value and comparing said 
hash value with a stored hash value. 

41 . (previously presented) The method of claim 40, further comprising said 
host device routing said data to said firewall device to be processed by said 
hardware implemented firewall, said routing taking place at a physical layer 
in said data stack. 

42. (previously presented) The method of claim 40, further comprising: 

sending policies to said firewall device, wherein the operation of said 
hardware implemented firewall is modified. 

43. (cancelled) 

44. (previously presented) The method of claim 40, wherein said stored hash 
value resides on said firewall device. 

45. (previously presented) The method of claim 40, further comprising: 

sending an alert if said configuration integrity check fails. 

46. (previously presented) The method of claim 45, further comprising: 

storing an alert if said configuration integrity check fails 

47. (currently amended) The method of claim 40, further comprising: 
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swapping resource spaces in said host device that are reserved for said 
communication network interface device and said firewall device, wherein 
said host device treats said communication network interface device as said 
firewall device and vice versa; and 

said communication network interface device transferring data 
received from said network to said firewall device, wherein said firewall 
device processes said data with said hardware implemented firewall. 

48. (currently amended) The method of claim 40, further comprising: 

transferring data to be transferred over said network by said 
e offlfflunication network interface device to said firewall device; and 

g) processing said data with said hardware implemented firewall, 
wherein said data is processed by said hardware implemented firewall before 
it is transferred over said network connection established via said 
communication network interface device. 

49. (currently amended) The method of claim 48, wherein said transferring 
data to be transferred over said network by said communication network 
interface device to said firewall device comprises: 

routing said data from said host device to said firewall device before it 
is sent to said communication network interface device, said routing taking 
place at a physical layer in said data stack. 

50. -63. (cancelled) 
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